Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240730-en -
resource tags
-
submitted
01-08-2024 21:25
General
-
Target
81c74042b9e2316669814aeb19d29bac_JaffaCakes118.exe
-
Size
46KB
-
MD5
81c74042b9e2316669814aeb19d29bac
-
SHA1
8d0be3d18d49f50fd93205d235c027a0a974c1ed
-
SHA256
a7505906e300cd356b2b709c6c138fcd6efa5c9ddaa09541a8d0c4979ecd6d46
-
SHA512
1792cbeb3de824b2c64edcb4a36b124ddb4edd8ce675ae899dba8da11335089298e0f13d9be4a0cfcf8863c073354e2927e72b3151efec41a280e4bd4d032991
-
SSDEEP
768:l+zWrGmqfXrDjGBnM+L74NccTulDkZ//Q8QPLfx7tPo5Lkz:l+SimYL+f4up4Z//ultPl
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\81c74042b9e2316669814aeb19d29bac_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\81c74042b9e2316669814aeb19d29bac_JaffaCakes118.exe"1⤵
- Checks computer location settings
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
60KB
-
Filesize
52KB
-
Filesize
52KB
-
Filesize
52KB
-
Filesize
60KB